Openntpd

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Openntpd records in CISA KEV

No Openntpd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openntpd 1 record LOW

Records

1 record

TI-2016-04423 CVE-2016-5117 · GHSA-4m25-49gx-cpq6

OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which…

LOW 28

OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle mitigations via a crafted timestamp constraint with a valid certificate.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00702 Published 2017-01-31 No fix listed CWE-254

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0